GRC, Privacy & Security Awareness Manager

About the role

Flutterwave was founded on the principle that every African must be able to participate and thrive in the global economy. The company has built a trusted payment infrastructure that enables borderless payments for consumers and businesses. Flutterwave is seeking a GRC, Privacy and Security Awareness Manager to lead the development, implementation, and compliance of technical security across the enterprise.

Key responsibilities

• Develop and implement security standards, processes, procedures, and guidelines for the enterprise.
• Maintain governance frameworks, policies, and risk management processes for emerging technologies, including AI, ensuring regulatory alignment.
• Coordinate with technology and business teams to assess, implement, and monitor security, privacy, compliance, and AI‑related risks.
• Perform governance and risk assessments for AI‑enabled solutions and third‑party AI services.
• Report security performance against established metrics and ensure compliance with service level agreements.
• Create and run an information security awareness program for staff.
• Ensure personal information of customers, employees, and partners is processed and protected in line with data privacy laws and best practices.

Required profile

• BA or MS in Computer Science, Information Systems Management, Business Administration, or a related discipline.
• Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM).
• Minimum 8 years of experience in information security, risk management, and privacy practices.
• At least 5 years of experience with regulatory compliance frameworks such as ISO 27001, COBIT, NIST 800.
• Experience in strategic planning, budgeting, and allocation (minimum 3 years).

Required skills

• CISSP certification
• CISM certification
• ISO 27001 framework
• COBIT framework
• NIST 800 framework
• AI governance and risk management